Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/323830333a356432303a3a2f33322d3332203d3e20323637373537.roa
File:                     323830333a356432303a3a2f33322d3332203d3e20323637373537.roa (raw, json)
Hash identifier:          YXfb/nJiwZgee3mnR9o2bxBYRoaYavzPzysrd0B3ATY=
Subject key identifier:   6D:01:5C:65:76:4B:E8:06:B1:B5:E8:2D:F9:19:3F:2F:03:4A:F6:11
Certificate issuer:       /CN=096026F2035C01DFDDA491A54F0110D751D4B655
Certificate serial:       55D11E93CC35CE421CD867F270938090387FCF4E
Authority key identifier: 09:60:26:F2:03:5C:01:DF:DD:A4:91:A5:4F:01:10:D7:51:D4:B6:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096026F2035C01DFDDA491A54F0110D751D4B655.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/323830333a356432303a3a2f33322d3332203d3e20323637373537.roa
Signing time:             Tue 24 Feb 2026 17:35:00 +0000
ROA not before:           Tue 24 Feb 2026 17:30:00 +0000
ROA not after:            Tue 23 Feb 2027 17:35:00 +0000
asID:                     267757
IP address blocks:        2803:5d20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/096026F2035C01DFDDA491A54F0110D751D4B655.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/096026F2035C01DFDDA491A54F0110D751D4B655.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096026F2035C01DFDDA491A54F0110D751D4B655.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 15:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d1:1e:93:cc:35:ce:42:1c:d8:67:f2:70:93:80:90:38:7f:cf:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096026F2035C01DFDDA491A54F0110D751D4B655
        Validity
            Not Before: Feb 24 17:30:00 2026 GMT
            Not After : Feb 23 17:35:00 2027 GMT
        Subject: CN=6D015C65764BE806B1B5E82DF9193F2F034AF611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b7:61:e2:f5:b6:39:29:24:c0:67:67:98:a3:
                    cf:dd:46:7a:7e:e9:12:cd:4d:1b:b1:e5:11:3d:f3:
                    98:13:72:52:22:3f:52:b9:1d:24:40:ab:da:62:2c:
                    3e:97:66:18:5c:97:36:d0:cf:26:62:c2:1a:c2:47:
                    ae:1e:4d:94:10:8e:ae:2e:bb:1a:c8:cf:d2:a1:9e:
                    8b:97:40:f9:36:72:36:b9:6d:8e:aa:d0:f4:9f:32:
                    46:2a:d9:8b:de:af:69:f6:2a:96:e3:08:1a:a2:af:
                    c2:37:73:21:39:9e:b3:c6:5e:b5:a2:b5:04:fa:32:
                    10:3d:cb:b6:6e:ca:55:b0:e2:f7:7f:db:33:3b:a2:
                    9b:71:79:d6:f2:15:c7:ab:73:08:9c:75:44:f8:6f:
                    d6:ac:33:f2:79:96:76:ca:6b:82:68:c6:03:f1:ff:
                    05:18:22:74:30:75:a5:da:be:cb:96:25:26:94:46:
                    71:ad:0c:8c:a1:dc:58:cc:1e:86:0f:b3:84:b3:4d:
                    69:04:3d:a9:24:04:ad:07:38:d6:2e:82:bf:37:41:
                    aa:b6:d8:e4:a9:9d:8e:8f:48:a9:cb:27:d1:d5:9a:
                    bc:f7:8d:cc:b0:82:8e:06:8a:f9:eb:97:47:83:a1:
                    4e:28:ad:92:90:46:fe:37:35:bd:1b:00:aa:a0:85:
                    09:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:01:5C:65:76:4B:E8:06:B1:B5:E8:2D:F9:19:3F:2F:03:4A:F6:11
            X509v3 Authority Key Identifier:
                keyid:09:60:26:F2:03:5C:01:DF:DD:A4:91:A5:4F:01:10:D7:51:D4:B6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/096026F2035C01DFDDA491A54F0110D751D4B655.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096026F2035C01DFDDA491A54F0110D751D4B655.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/323830333a356432303a3a2f33322d3332203d3e20323637373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:8e:86:18:a4:b6:23:34:c5:c0:8b:f7:9c:44:cb:a2:e7:c0:
         e5:3a:0d:7a:3b:1b:a7:5f:e2:41:90:30:d2:54:92:fd:1a:c9:
         d3:d6:2a:98:64:61:40:71:00:47:cb:a0:f8:67:eb:57:89:11:
         a7:9f:55:f4:39:6a:ec:3c:87:6f:9b:29:8b:b3:47:65:07:1d:
         16:1e:0b:c4:a2:1a:6d:95:e5:85:cd:f2:10:fd:1d:54:63:e4:
         2c:bc:81:19:f9:20:85:fd:3b:85:0d:a0:70:60:89:62:80:30:
         40:e6:01:72:38:dc:42:b7:c9:3d:e0:35:5e:f9:00:37:41:b5:
         48:dd:d5:1e:e6:61:38:eb:41:df:99:e2:0f:3f:d6:51:ec:af:
         cf:a3:28:90:c0:5f:6f:24:43:c4:13:d7:18:a4:bd:24:e8:a5:
         f3:51:bd:a8:7f:d6:1d:01:3a:7f:07:23:95:96:26:31:a7:ae:
         73:f1:34:e4:17:e9:8b:b4:31:4e:48:97:32:b1:60:f5:da:0c:
         f6:68:f7:db:32:4d:7e:f2:8b:08:2e:3e:b4:12:c4:e3:75:b3:
         b0:c5:c1:b9:50:3f:5e:f2:c9:b8:5c:76:ca:16:fb:c8:02:7f:
         35:89:8a:04:51:2f:9e:fb:b2:85:65:b7:d9:a9:f5:b3:33:c7:
         01:9f:bb:8e
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUVdEek8w1zkIc2GfycJOAkDh/z04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk2MDI2RjIwMzVDMDFERkREQTQ5MUE1NEYwMTEwRDc1
MUQ0QjY1NTAeFw0yNjAyMjQxNzMwMDBaFw0yNzAyMjMxNzM1MDBaMDMxMTAvBgNV
BAMTKDZEMDE1QzY1NzY0QkU4MDZCMUI1RTgyREY5MTkzRjJGMDM0QUY2MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBt2Hi9bY5KSTAZ2eYo8/dRnp+
6RLNTRux5RE985gTclIiP1K5HSRAq9piLD6XZhhclzbQzyZiwhrCR64eTZQQjq4u
uxrIz9KhnouXQPk2cja5bY6q0PSfMkYq2Yver2n2KpbjCBqir8I3cyE5nrPGXrWi
tQT6MhA9y7ZuylWw4vd/2zM7optxedbyFcercwicdUT4b9asM/J5lnbKa4JoxgPx
/wUYInQwdaXavsuWJSaURnGtDIyh3FjMHoYPs4SzTWkEPakkBK0HONYugr83Qaq2
2OSpnY6PSKnLJ9HVmrz3jcywgo4Givnrl0eDoU4orZKQRv43Nb0bAKqghQkDAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUbQFcZXZL6Aaxtegt+Rk/LwNK9hEwHwYDVR0j
BBgwFoAUCWAm8gNcAd/dpJGlTwEQ11HUtlUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQjdEQ0RDQTk5Nzk2NTk2RTJCMkYxOEQ5NzcwMUEwMTEx
RDg3MTI3NzhDNkEyNDlGOTQ1OThDQzhFMDFGMUE2LzAvMDk2MDI2RjIwMzVDMDFE
RkREQTQ5MUE1NEYwMTEwRDc1MUQ0QjY1NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOTYwMjZGMjAzNUMwMURGRERB
NDkxQTU0RjAxMTBENzUxRDRCNjU1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkI3RENEQ0E5OTc5NjU5NkUyQjJGMThEOTc3MDFBMDExMUQ4NzEyNzc4
QzZBMjQ5Rjk0NTk4Q0M4RTAxRjFBNi8wLzMyMzgzMDMzM2EzNTY0MzIzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzM3MzUzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDXSAw
DQYJKoZIhvcNAQELBQADggEBALCOhhiktiM0xcCL95xEy6LnwOU6DXo7G6df4kGQ
MNJUkv0aydPWKphkYUBxAEfLoPhn61eJEaefVfQ5auw8h2+bKYuzR2UHHRYeC8Si
Gm2V5YXN8hD9HVRj5Cy8gRn5IIX9O4UNoHBgiWKAMEDmAXI43EK3yT3gNV75ADdB
tUjd1R7mYTjrQd+Z4g8/1lHsr8+jKJDAX28kQ8QT1xikvSTopfNRvah/1h0BOn8H
I5WWJjGnrnPxNOQX6Yu0MU5IlzKxYPXaDPZo99syTX7yiwguPrQSxON1s7DFwblQ
P17yybhcdsoW+8gCfzWJigRRL577soVlt9mp9bMzxwGfu44=
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:16:52 2026 by rpki-client